added outline for token-based auth